Cisco Technology, Inc.

Steve Chen-Lin Chang

Shyyunn Lin

Junekang Yang

Alexander Clemm

Ludwig Alexander Clemm

Jiabin Zhao

L Alexander Clemm

Gaurang Rajeev Mokashi

Jianbin Zhao

Eric Dorman

Carlos M Pignataro

Petre Dini

Rodney Dunn

A system and technique for visualizing performance data over a network path are disclosed. More specifically, a network management system generates and displays an object that represents data for one or more performance characteristics related to a plurality of network nodes in the network path. In one embodiment, a graph having an x-axis and a y-axis is displayed, the x-axis being associated with two or more network nodes in the network path and the y-axis being associated with a first performance characteristic. Data corresponding to the first performance characteristic is plotted as data points corresponding to the network nodes associated with the x-axis. Data corresponding to a second performance characteristic may be represented via the size or the color of the data points. Alternatively, a characterization of the data corresponding to the first performance characteristic may be represented by the size or color of the data points.

Visualization of performance data over a network path

The network device is described that comprises an allocator to adaptively allocate respective event message rate limits to client network devices that is in communication with an event-based system logging server to send event messages to the logging server for processing. The adaptively allocated event message rate limits are communicated to the client network devices so that limiting of a global rate of event messages received by the logging server comprises limiting the respective rates at which the client network devices can transmit event messages to the logging server. Measurement of respective event message rates comprises a count of event messages actually received by the logging server from the corresponding client device within a defined time window.

Adaptive cross-network message bandwidth allocation by message servers

A method and apparatus for self-monitoring to identify an occurrence of a threshold and rebooting in response to the occurrence of the threshold is provided. In an embodiment, a data processing apparatus comprises one or more processors; logic coupled to the one or more processors and comprising one or more stored sequences of instructions which, when executed by one or more processors, cause the one or more processors to obtain a threshold associated with the apparatus; self-monitor the apparatus to identify an occurrence of the threshold; and self-reboot the apparatus responsive to the occurrence of the threshold.

Self-restarting network devices

A system and technique for visualizing changes and trends in performance data over a network path are disclosed. More specifically, a network management system generates and displays an object that represents data for one or more performance characteristics related to a plurality of network nodes in the network path. The object is dynamically updated to include updated data related to the one or more performance characteristics. In one embodiment, a representation of the updated data is superimposed over representations of previously collected data relating to the performance characteristics. The transparency of the representations associated with the previously collected data may reflect a difference in time between the current time and the time at which the data was collected. In another embodiment, a timeline is included in the object that tracks the state of the object at one or more previous points in time.

Visualization of changes and trends over time in performance data over a network path

In one embodiment, a network device is described as including a rate monitor to monitor an actual individual message rate of event messages sent from each one of a plurality of sending devices operatively in communication with the network device, an allocator to allocate an individual message rate limit to each of the plurality of sending devices, and a communication module to communicate a rate limit instruction to at least one of the sending devices, the rate limit instruction to limit the transmission rate of event messages.

Techniques for system (syslog) messages are provided. As syslog messages are generated a dual sequence number is maintained for each syslog message. The first sequence number is consistent for each syslog message and represents a total number of syslog messages received. The second sequence number is maintained as a total message count for a specific session for which a syslog message is assigned.

Techniques for sequencing system log messages

In an embodiment, a data processing system comprises a repository configured to store a plurality of event message definitions for error messages, syslog messages, or other notification messages that may be emitted by one or more managed network elements; event annotation logic coupled to the data repository and configured to receive and store one or more annotations to each of the event message definitions, wherein each of the annotations specifies event context information to be collected in the managed network elements when an associated event message occurs; event forensics definitions generator logic coupled to the event annotation logic and configured to generate an event forensics definitions file capable of interpretation by one or more managed network elements and comprising event type identifiers and context information identifiers for context information to be collected, and configured to cause distributing the event forensics definitions file to the one or more managed network elements.

Adaptively collecting network event forensic data

A network device and a method for monitoring operational messages is described. The method comprises monitoring an occurrence of an operational message of the network device, and storing dynamic context information at the time that the operational message occurred. The stored dynamic context information is then associated with the operational message. The operational message (e.g., a syslog message) may be stored together with the dynamic context information in a metalog memory and may comprise a snapshot of a procedure stack, the procedure stack including information indicative of a sequence of procedure invocations.

Growing community of inventors

Cupertino, CA, United States of America

Steve Chen-Lin Chang